PT-2026-44392

🗓️ 28 May 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 13 Views

pypdf before 6.12.0 lets attackers cause memory growth when text is extracted in layout mode.

Reporter	Title	Published	Views	Family All 1047
vulnersOsv	5mghost-rover (>=0.0.1 <=0.0.3), a-data-processing (=0.0.1) +676 more potentially affected by CVE-2026-48156 via pypdf (>=3.10.0 <=6.11.0)	12 Jun 202618:29	–	vulnersosv
vulnersOsv	5mghost-rover (>=0.0.1 <=0.0.3), ace-framework (>=0.6.0 <=0.7.3) +98 more potentially affected by CVE-2026-49460 via pypdf (>=6.0.0 <=6.11.0)	16 Jun 202613:46	–	vulnersosv
vulnersOsv	10xscale-agentflow-cli (=0.1.5), 360solutions-bc-mcp (>=0.5.3 <=0.5.6) +560 more potentially affected by CVE-2026-53537 via python-multipart (>=0.0.10 <=0.0.29)	15 Jun 202620:20	–	vulnersosv
vulnersOsv	5mghost-rover (>=0.0.1 <=0.0.3), ace-framework (>=0.6.0 <=0.7.3) +98 more potentially affected by CVE-2026-48155 via pypdf (>=6.0.0 <=6.11.0)	28 May 202616:50	–	vulnersosv
vulnersOsv	360solutions-bc-mcp (>=0.5.3 <=0.5.6), 3di-cmd-client (>=0.0.1a0 <=0.0.3) +749 more potentially affected by CVE-2026-48524 via pyjwt (>=2.0.0 <=2.12.1)	28 May 202616:50	–	vulnersosv
vulnersOsv	5mghost-rover (>=0.0.1 <=0.0.3), ace-framework (>=0.6.0 <=0.7.3) +555 more potentially affected by CVE-2026-54651 via pypdf (>=3.1.0 <=6.12.2)	22 Jun 202622:19	–	vulnersosv
vulnersOsv	00-merlin-hu-mcpdemo-pipy (>=0.1.0 <=0.1.1), 00-renjing-mcp-server-pypi (=0.1.0) +44360 more potentially affected by CVE-2026-54282 via starlette (>=0.20.2 <=1.2.1)	22 Jun 202618:16	–	vulnersosv
vulnersOsv	10xscale-agentflow-cli (=0.1.5), 360solutions-bc-mcp (>=0.5.3 <=0.5.6) +560 more potentially affected by CVE-2026-53540 via python-multipart (>=0.0.10 <=0.0.30)	15 Jun 202620:23	–	vulnersosv
vulnersOsv	0lever-utils (>=0.0.2 <=0.0.7), 0x-web3 (=5.0.0a5) +8036 more potentially affected by CVE-2026-34180 via cryptography (>=0.6.1 <=48.0.0)	9 Jun 202618:33	–	vulnersosv
vulnersOsv	360solutions-bc-mcp (>=0.5.3 <=0.5.6), 3di-cmd-client (>=0.0.1a0 <=0.0.3) +1475 more potentially affected by CVE-2026-48522 via pyjwt (>=0.2.1 <=2.12.1)	15 Jun 202619:28	–	vulnersosv

Source	Link
suse	www.suse.com/security/cve/CVE-2026-48735
osv	www.osv.dev/vulnerability/CVE-2026-48817
osv	www.osv.dev/vulnerability/CVE-2026-59935
osv	www.osv.dev/vulnerability/CVE-2026-53538
osv	www.osv.dev/vulnerability/CVE-2026-59937
osv	www.osv.dev/vulnerability/openSUSE-SU-2026:10974-1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59937
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-48526
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EH47852.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-48710

28 Jul 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.5 - 7.5

CVSS 48.7

EPSS0.01025

SSVC